Remote Senior Information Risk Analyst — Healthcare Security

bcbsma; Boston (MA); On-site; USD 111,000 - 136,000; Full time

Benefits offered by this job

401(k)

Job summary

Blue Cross Blue Shield of Massachusetts is seeking a Senior Information Risk Analyst to join our Information Risk Management team in Boston. You will evaluate technology risk posture by conducting objective assessments of third parties, systems, and applications, translating findings into actionable business insights for leadership.

This role partners with Legal, Privacy, Audit, and Procurement to implement practical mitigations, guide risk-based decisions, and continuously mature our

Qualifications

• 8+ years of experience in third-party risk management, technology, IT, or risk management functions.
• Experience navigating healthcare regulatory and compliance frameworks, specifically HIPAA and HITRUST.
• Hands-on experience with enterprise GRC platforms and Third-Party Risk Management tools.

Responsibilities

• Perform vendor risk assessments and communicate risks aligned with organizational risk appetite.
• Function as a technology risk SME with infrastructure resiliency, secure data transmission, and threat vectors.
• Translate HIPAA requirements into plain language and guide business units in data safeguarding strategies.
• Lead governance document reviews to keep them practical and aligned with business needs.
• Collaborate with Legal and Procurement to negotiate contract language and mitigations.

Skills

Risk management

Regulatory compliance

HIPAA knowledge

Data analysis

Executive communication

Vendor risk assessments

Education

BA/BS in Risk Management or related field

CRISC

CTPRP / C3PRMP

Healthcare compliance knowledge

Tools

Whistic

RiskRecon

ServiceNow

GRC platforms

Job description

Blue Cross Blue Shield of Massachusetts is seeking a Senior Information Risk Analyst to join our Information Risk Management team in Boston. You will evaluate technology risk posture by conducting objective assessments of third parties, systems, and applications, translating findings into actionable business insights for leadership.

This role partners with Legal, Privacy, Audit, and Procurement to implement practical mitigations, guide risk-based decisions, and continuously mature our